Singapore Online Safety Act 2026: Complete Guide for Users and Businesses

Singapore has steadily built one of the world's most comprehensive digital safety frameworks, and the Online Safety Act (OSA) sits at the centre of that effort. As the law continues to mature into 2026 with new codes of practice, expanded enforcement powers, and tighter obligations on online services, both everyday users and businesses operating in Singapore need to understand exactly how it works.

This complete guide breaks down the Singapore Online Safety Act 2026 — what it is, who it covers, what content it targets, the duties placed on platforms, penalties for non-compliance, and the practical steps individuals and companies should take to stay on the right side of the law.

What Is the Singapore Online Safety Act?

The Online Safety Act is a Singapore law, administered by the Infocomm Media Development Authority (IMDA), that regulates harmful content on online communication services accessible to users in Singapore. It was introduced through amendments to the Broadcasting Act in 2023 and has since been expanded through additional codes and enforcement directions that are in full operation by 2026.

In simple terms, the OSA gives IMDA the authority to direct online platforms — particularly social media services with significant reach in Singapore — to remove or disable access to "egregious content" and to put in place systems that protect users, especially children, from harm.

Why Singapore Introduced the Law

The OSA was created in response to rising concerns about:

• Child sexual exploitation material circulating on mainstream platforms
• Terrorism-related content and incitement to violence
• Cyberbullying, doxxing, and harassment campaigns
• Health-related misinformation during and after the pandemic
• Content that threatens public order, racial, or religious harmony

Rather than relying solely on voluntary moderation by platforms, Singapore chose a statutory model giving regulators clear powers to act quickly.

Who Does the Online Safety Act Apply To?

The Act applies to "online communication services" (OCS) accessible to end-users in Singapore. In 2026, the obligations fall into two broad categories.

1. All Online Communication Services

Any service — regardless of where it is based — that lets users in Singapore access or share content can be issued a directive by IMDA to disable or restrict access to egregious content. This includes social networks, messaging platforms, video-sharing sites, forums, and large-scale content hosts.

2. Designated Online Communication Services (DOCS)

Platforms with significant reach in Singapore can be "designated" by IMDA. Once designated, they must comply with the Code of Practice for Online Safety, which imposes additional, structural duties. Services currently designated include major social media platforms used widely by Singaporean users.

What Counts as "Egregious Content" Under the OSA?

The Act defines egregious content narrowly to focus on the most harmful material. It covers content that:

1. Advocates or instructs on suicide or self-harm
2. Depicts or advocates child sexual exploitation
3. Depicts or advocates terrorism
4. Depicts physical or sexual violence of a serious nature
5. Incites racial or religious disharmony or tensions in Singapore
6. Poses a risk to Singapore's public health
7. Poses a risk to Singapore's national security, sovereignty, or public order

Importantly, the Act is not aimed at ordinary political speech, satire, or routine online disagreement. It targets a defined, serious class of harm.

Key Duties on Platforms in 2026

Under the Code of Practice for Online Safety, designated platforms must implement specific systems and processes.

User Safety Measures

• Provide tools for users to minimise exposure to harmful content
• Allow users to report content and accounts easily
• Act on reports within reasonable timeframes
• Offer in-app information about online safety resources

Child Safety Measures

• Default stricter safety settings for accounts belonging to minors
• Restrict targeted advertising to children
• Reduce discovery of harmful content by younger users
• Provide age-appropriate reporting and support features

Accountability Measures

• Publish annual online safety reports describing the measures taken
• Share data on content takedowns, user reports, and enforcement outcomes
• Cooperate with IMDA directives and provide required information

How Enforcement Works: From Report to Takedown

A key feature of the Act is a fast, structured enforcement path. The typical process looks like this:

1. Identification — Harmful content is identified via user reports, researchers, law enforcement referrals, or IMDA's own monitoring.
2. Assessment — IMDA assesses whether the content falls within the egregious content categories and whether Singapore users can access it.
3. Directive issued — IMDA may issue a Disabling Direction (to the platform) or an Access Blocking Order (to internet access service providers) if the platform fails to comply.
4. Compliance window — The platform must act within the specified time, often very short for severe content.
5. Escalation — Non-compliance may lead to financial penalties and, in extreme cases, directions to ISPs to block the service in Singapore.

Penalties for Non-Compliance

The Act carries substantial penalties intended to make compliance a priority even for the largest global platforms.

Breach	Potential Penalty
Failure to comply with a Disabling Direction	Fines up to S$1 million, plus additional daily fines for continuing offences
Failure to comply with Code of Practice obligations	Financial penalties and formal compliance directions
Failure to comply with an Access Blocking Order (by ISPs)	Fines and regulatory action against the service provider
Continued non-compliance by a platform	Blocking of the service's access in Singapore

What the OSA Means for Everyday Users in Singapore

For individual users, the Online Safety Act creates clearer rights and expectations when using online services.

Rights and Protections

• Easier reporting flows on designated platforms
• Stronger default safeguards for children and teens
• Faster takedown of the most harmful categories of content
• Transparency through annual safety reports

Personal Responsibilities

While the OSA mainly targets platforms, users should remember that other Singapore laws — such as the Protection from Online Falsehoods and Manipulation Act (POFMA), the Protection from Harassment Act (POHA), and the Penal Code — still govern individual conduct online. Posting, sharing, or amplifying egregious content can carry personal legal consequences.

What the OSA Means for Businesses and Content Creators

Businesses operating in Singapore — from local SMEs to global tech firms — need to review their online presence, content moderation, and vendor relationships in light of the Act.

Social Media and Platform Operators

If you operate a user-generated content platform accessible in Singapore, you should:

1. Map whether your service meets the thresholds for potential designation
2. Build or refine content moderation workflows aligned with the Code of Practice
3. Establish a Singapore point of contact for regulatory engagement
4. Prepare template processes for responding to IMDA directives within tight timelines
5. Develop clear user reporting and appeals mechanisms

Marketers, Agencies, and Link Sharing

Marketing teams in Singapore should pay particular attention to the links and landing pages they distribute via social media, email, and messaging. Linking to content that is later classified as egregious can trigger reputational and compliance risks even if the original post is not yours.

A disciplined link management approach helps. Using a reputable link shortener such as Lunyb lets teams centralise campaign links, update destinations if a page is removed, and keep an audit trail — which is useful if a regulator or client ever asks you to demonstrate what a link pointed to and when. For a broader view of options, see our 2026 buyer's guide to the best URL shorteners.

Publishers and Content Creators

Independent creators, newsrooms, and influencers should:

• Review community guidelines on the platforms they rely on
• Be cautious when covering sensitive topics such as terrorism, extremism, or self-harm — follow established safe reporting guidelines
• Keep copies of their own content in case of removal disputes
• Understand platform appeals processes

OSA vs Other Singapore Online Laws

The Online Safety Act does not stand alone. It works alongside several other laws, each with a different purpose.

Law	Main Focus	Primary Target
Online Safety Act (OSA)	Egregious content on online services	Platforms / services
Online Criminal Harms Act (OCHA)	Content linked to criminal activity (scams, malicious cyber activity)	Platforms and individuals
POFMA	False statements of fact affecting public interest	Individuals and platforms
Protection from Harassment Act (POHA)	Harassment, stalking, doxxing	Individuals
Personal Data Protection Act (PDPA)	Collection and use of personal data	Organisations

Together, these laws create a layered framework: OSA focuses on systemic platform duties, OCHA on criminal content, POFMA on falsehoods, POHA on interpersonal harms, and PDPA on data handling.

Practical Compliance Checklist for 2026

Whether you are a platform, a brand, or an individual professional, the following checklist can help you align with the OSA environment in 2026.

For Platforms

1. Confirm whether your service may be designated under the Act
2. Document moderation policies and align them with the Code of Practice
3. Implement default child safety settings
4. Create a 24/7 escalation channel for regulator directives
5. Publish an annual online safety report

For Businesses and Marketers

1. Train staff on what constitutes egregious content
2. Audit third-party links and embedded content in your campaigns
3. Use a trusted link management tool to monitor and update destinations
4. Create an internal escalation path for content complaints
5. Include OSA considerations in influencer and vendor contracts

For Individual Users

1. Learn how to report harmful content on each platform you use
2. Configure safety and privacy settings — especially for younger family members
3. Avoid sharing or amplifying content that could qualify as egregious
4. Keep devices updated and use strong authentication
5. Be cautious with shortened or unfamiliar links and verify destinations before clicking

Privacy and Safety Beyond the Law

Compliance with the OSA is only one layer of staying safe online. Users in Singapore should also consider:

• Encrypted DNS such as DNS-over-HTTPS to reduce exposure to malicious domains
• Privacy-focused browsers that block trackers and known phishing sites
• Two-factor authentication on all important accounts
• Trusted link shorteners with click analytics and safe-browsing checks, such as Lunyb, so that recipients can trust the links you share
• Regular security reviews of connected apps, browser extensions, and device permissions

These measures complement the structural protections created by the OSA and reduce individual risk.

What to Expect Next

Looking beyond 2026, several trends are likely to shape the OSA's evolution:

• Expansion of the Code of Practice to new categories of services, potentially including app stores and large messaging platforms
• More detailed obligations around algorithmic amplification and recommender systems
• Closer coordination with regional regulators across ASEAN
• Greater focus on AI-generated harmful content, including deepfakes
• Enhanced transparency reporting and independent audits

Organisations that invest in strong governance now will find it much easier to adapt as these developments arrive.

Frequently Asked Questions

1. Does the Singapore Online Safety Act apply to overseas platforms?

Yes. The Act applies to any online communication service accessible to users in Singapore, regardless of where the service is based. IMDA can issue directives to overseas platforms, and if they fail to comply, local internet access providers can be ordered to block the service.

2. Can individuals be fined under the Online Safety Act?

The OSA itself is primarily directed at platforms and online communication services, not individual users. However, individuals who create or share harmful content may face consequences under other Singapore laws such as POHA, POFMA, OCHA, or the Penal Code.

3. How quickly must platforms remove egregious content?

Timeframes are specified in each IMDA directive and depend on the severity of the content. For the most serious categories, such as child sexual exploitation or terrorism-related material, platforms are expected to act very quickly — often within hours.

4. How does the OSA affect small businesses in Singapore?

Most small businesses will not be directly regulated as online communication services. However, they should still care about the law because it affects the platforms they advertise on, the links they share, and the online environment in which their customers operate. Reviewing marketing links, moderation of their own community channels, and staff training are sensible steps.

5. Where can I report harmful content in Singapore?

Users can report harmful content directly on the platform where it appears using the in-app reporting tools, which designated platforms are required to provide. Serious cases involving criminal conduct should also be reported to the Singapore Police Force, and regulatory issues can be escalated to IMDA through its official channels.

Conclusion

The Singapore Online Safety Act 2026 reflects a clear policy choice: online services that reach Singaporeans must take systemic responsibility for user safety, especially for children and against the most harmful categories of content. For platforms, this means structured compliance programs and faster response to regulators. For businesses and creators, it means more careful content and link governance. For users, it means stronger baseline protections — and a continued personal responsibility to behave safely online.

By understanding the Act, aligning internal processes, and combining compliance with good privacy and link-management practices, both individuals and organisations in Singapore can benefit from a safer and more trustworthy online environment in 2026 and beyond.